898 matches found
Multiple privilege escalation
...
Admin Account Persistence after Deletion
...
Out-of-bounds Write in sndproxy
...
OS command injection
...
Lack of capacity to filter logs by administrator access
...
Path traversal vulnerability in CLI commands
...
Missing authentication in fgfmsd
...
Priviledged admin able to modify super-admins password
...
Arbitrary file read on endpoint
...
Administrator cookie leakage
...
Format string vulnerability in administrative interface
...
Reflected Cross Site Scripting (XSS) on download PDF report endpoint
...
XSS on delete endpoint
...
Reflected Cross Site Scripting (XSS) on download progress endpoint
...
Command injection due to an unsafe usage of function
...
Authorization bypass via key value controlled by user
...
Unauthenticated VNC access exposed on all interfaces
...
Request smuggling attack in FortiOS
...
Reflected XSS in HA cluster
...
Credential leakage through debug commands
...
Stack-based buffer overflow on fortitoken import feature
...
Double free in automation-stitch
...
OS command injection in CLI command
...
Insertion of sensitive information into Event log
...
Stack based buffer overflow in httpd
...
Stack buffer overflow in CLI command
...
IDOR on download logs feature
...
Buffer overflow in administrative interface
...
Arbitrary file delete on endpoint
...
Improper access control in backup and restore features
...
Fortilink lack of certificate validation
...
Format String Bug in fgfmd
...
Improper authorization for HA requests
...
Arbitrary file delete
...
Reflected Cross Site Scripting (XSS) on the "file ondemand" rendering endpoint
...
Server side request forgery on fortiview top threats report generation feature.
...
OS command injection
...
Path traversal in history downloadzip
...
Path Traversal vulnerability
...
Authenticated CLI Commands Buffer Overflow
...
Heap Overflow in fgfmsd
...
Arbitrary file overwrite in FGFMd
...
Out of bounds read in ipsec ike
...
SSLVPN WEB UI Text injection
...
OpenSSH Terrapin attack (CVE-2023-48795)
...
Cross-site scripting forgery (CSRF) in HTTPd CLI console
...